High severity7.8NVD Advisory· Published Jan 26, 2017· Updated May 13, 2026
CVE-2016-8710
CVE-2016-8710
Description
An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability causing an out of bounds heap write leading to remote code execution. This vulnerability can be triggered via attempting to decode a crafted BPG image using Libbpg.
Affected products
3cpe:2.3:a:libbpg_project:libbpg:0.9.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libbpg_project:libbpg:0.9.4:*:*:*:*:*:*:*
- cpe:2.3:a:libbpg_project:libbpg:0.9.7:*:*:*:*:*:*:*
- Libbpg/Libbpgv5Range: 0.9.4
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.talosintelligence.com/reports/TALOS-2016-0223/nvdExploitPatchTechnical DescriptionThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/95740nvdBroken LinkThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.